With respect to the 2.0 docs Bitfusion encrypts control traffic, but does not encrypt data traffic.

Actually, for vm traffic encryption there are some restrictions with PVRDMA for GPUhost-to-client-traffic, vSAN for data-in-transit encryption and in Bitfusion client' package Netlink Protocol Library Suite (libnl).

A Bitfusion-aware Horizon accessible Ubuntu desktop might be the way to go.